ceb9ac19a86c0f61906580f1d73657dfd95a4b7e866a49d9b2521238f34b2c7f

General

Target
ceb9ac19a86c0f61906580f1d73657dfd95a4b7e866a49d9b2521238f34b2c7f
Size 791KB
Sample240529-prswaafc33
SHA256 ceb9ac19a86c0f61906580f1d73657dfd95a4b7e866a49d9b2521238f34b2c7f
MD5 e6a405fce67912c654c68f18a52c103e
SHA1 775e526800f5470f6a87628b805f5d4ae5ca029b
SHA512 89c569f81140c892e096f69e5d828b8be8f67b3d1227ad78f69543bb333e88688c7bcf7f2b55e57531fbf45e06b3e6c5575bdb4f7283b130080a76edce178fc1
SSDEEP 12288:AA+saEK8ganvxovaxubfTeEb8KvbpXQ0WShf4FCnqK2i:AA7bxnpovFWwxvFYShffq
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ceb9ac19a86c0f61906580f1d73657dfd95a4b7e866a49d9b2521238f34b2c7f

File Explorer

ceb9ac19a86c0f61906580f1d73657dfd95a4b7e866a49d9b2521238f34b2c7f

.exe 791KB

ceb9ac19a86c0f61906580f1d73657dfd95a4b7e866a49d9b2521238f34b2c7f

IMPHASH 3dee3100346eee770f2058c4b7a7c7a5
SHA256 ceb9ac19a86c0f61906580f1d73657dfd95a4b7e866a49d9b2521238f34b2c7f
MD5 e6a405fce67912c654c68f18a52c103e
SHA1 775e526800f5470f6a87628b805f5d4ae5ca029b
SHA512 89c569f81140c892e096f69e5d828b8be8f67b3d1227ad78f69543bb333e88688c7bcf7f2b55e57531fbf45e06b3e6c5575bdb4f7283b130080a76edce178fc1
SSDEEP 12288:AA+saEK8ganvxovaxubfTeEb8KvbpXQ0WShf4FCnqK2i:AA7bxnpovFWwxvFYShffq
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9130

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNumaNodeProcessorMask GlobalDeleteAtom GetConsoleAliasesLengthW InterlockedDecrement GetComputerNameW GetTimeFormatA GetModuleHandleW EnumTimeFormatsA ActivateActCtx ReadFileScatter WriteConsoleOutputA InterlockedPopEntrySList GetFileAttributesA SetConsoleMode GetModuleFileNameW SetConsoleTitleA RaiseException GetConsoleAliasesW SetLastError GetProcAddress GetProcessHeaps LocalLock LoadLibraryA FreeEnvironmentStringsW BuildCommDCBA CompareStringA DeleteCriticalSection GetShortPathNameW GetFileInformationByHandle LocalFileTimeToFileTime MultiByteToWideChar GetCommandLineA GetStartupInfoA RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo InterlockedIncrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId GetLastError HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode VirtualAlloc HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers CreateFileA CloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

ceb9ac19a86c0f61906580f1d73657dfd95a4b7e866a49d9b2521238f34b2c7f

kernel32

generic